CVE-2024-35698

MEDIUM 4.8CVE-2024-35698 · Published 08/06/2024 · updated 17/06/2026

In short

CVE-2024-35698 is a MEDIUM (CVSS 4.8) vulnerability affecting yith woocommerce tab manager (yithemes).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.3% of all vulnerabilities.
Fix: update to 1.35.1 or later.

Package	Affected versions	Patched versions
yith woocommerce tab manager yithemes	`< 1.35.1`	`1.35.1`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooCommerce Tab Manager yith-woocommerce-tab-manager.This issue affects YITH WooCommerce Tab Manager: from n/a through <= 1.35.0.

References

patchstack.com/database/Wordpress/Plugin/yith-woocommerce-tab-manager/vulnerability/wordpress-yith-woocommerce-tab-manager-plugin-1-35-0-cross-site-scripting-xss-vulnerability
patchstack.com/database/vulnerability/yith-woocommerce-tab-manager/wordpress-yith-woocommerce-tab-manager-plugin-1-35-0-cross-site-scripting-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free